[rt-users] Mandatory Custom Field Privileges

[Thomas Sibley]

On 07/10/2013 02:33 PM, Tim Wiley wrote:
> I'm setting the validation field in the Basic CF config to "(?#Mandatory)."

Ok, good.

> * What's unexpected is if a user has SeeCustomField, but not
> ModifyCustomField on a mandatory CF, at ticket creation they get the
> error "MyCustomField: Input must match [Mandatory]" even though it's not
> displayed & they don't have modify rights on it.  Shouldn't RT create
> the ticket just as it does for a user without SeeCustomField, leaving
> the mandatory CF unset?

This is totally a bug.  I just replicated it on 4.0-trunk.

After digging, I discovered that I fixed it on git master, which will
become RT 4.2.  An equivalent fix should be backported to the 4.0
version of the CF validation.

I'm Cc'ing this to our bug tracker.